运行程序,od attach,随便翻翻代码,看到这里比较可疑:
004022F3 83FF 18 CMP EDI,18
004022F6 75 54 JNZ SHORT CrackMe.0040234C
004022F8 83FB 16 CMP EBX,16
004022FB 75 4F JNZ SHORT CrackMe.0040234C
004022FD 83FD 1E CMP EBP,1E
00402300 75 4A JNZ SHORT CrackMe.0040234C
00402302 837C24 30 2F CMP DWORD PTR SS:[ESP+30],2F
00402307 75 43 JNZ SHORT CrackMe.0040234C
00402309 837C24 18 48 CMP DWORD PTR SS:[ESP+18],48
0040230E 75 3C JNZ SHORT CrackMe.0040234C
00402310 837C24 28 11 CMP DWORD PTR SS:[ESP+28],11
00402315 75 35 JNZ SHORT CrackMe.0040234C
00402317 837C24 20 21 CMP DWORD PTR SS:[ESP+20],21
0040231C 75 2E JNZ SHORT CrackMe.0040234C
0040231E 837C24 10 37 CMP DWORD PTR SS:[ESP+10],37
00402323 75 27 JNZ SHORT CrackMe.0040234C
00402325 837C24 14 33 CMP DWORD PTR SS:[ESP+14],33
0040232A 75 20 JNZ SHORT CrackMe.0040234C
0040232C 817C24 1C 860000>CMP DWORD PTR SS:[ESP+1C],86
[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课